In my current web application I am trying to get rid of web.xml and I have not been able to properly setup the security constraint that forces all requests to the applicatio
I was able to do this for a project by configuring the glassfish domain security:
That covers your glassfish config, here is your web.xml:
SecurityConstraint
Everything
Everything
/*
UserAuthenticationConstraint
GroupFoo
FORM
FooRealm
/Login.jsp
/LoginError.html